go-firebase-exploit

           __
   __ _   / _|   ___
  / _` | | |_   / _ \
 | (_| | |  _| |  __/
  \__, | |_|    \___|
  |___/

go-firebase-exploit or gfe is a tool for exploiting insecure firebase databases.

---

Contents

• Installation
  • from Binary
  • from GitHub
• Usage
  • Basic Usage
  • Commands and Flags
  • Example
• Bugs
• License

---

Installation

• from Binary

Download a binary from releases page.

• from GitHub

git clone https://github.com/fadhilthomas/go-firebase-exploit
cd go-firebase-exploit
go build -o gfe main.go
sudo mv gfe /usr/local/bin

Usage

• Basic Usage

gfe push -u "https://insecure-database.firebaseio.com/"

• Commands and Flags

gfe --help

Commands / Flags	Description
push	Push data to database.
remove	Remove exploit data from database.
url	Firebase database url.

• Example

• Push Data to Database

gfe push -u "https://insecure-database.firebaseio.com/"

• Remove Data from Database

gfe remove -u "https://insecure-database.firebaseio.com/"

Bugs

If you found a bug, please open the issue. All bug reports are appreciated.

License

go-firebase-exploit released under MIT. See LICENSE for more details.